Unable to Connect to FortiGuard Servers: Causes and Solutions

Author

Reads 593

Detailed image of a black ethernet cable with RJ-45 connector on a white surface.
Credit: pexels.com, Detailed image of a black ethernet cable with RJ-45 connector on a white surface.

If you're unable to connect to FortiGuard servers, it's likely due to a misconfigured DNS server. This can happen when the DNS server is not set to use the FortiGuard DNS server.

FortiGuard servers rely on a DNS server to resolve domain names to IP addresses. If the DNS server is not configured correctly, you won't be able to connect to the FortiGuard servers.

A firewall or antivirus software might be blocking the connection to the FortiGuard servers. This can occur when the firewall or antivirus software is set to block certain types of traffic.

Troubleshooting Steps

If you're unable to connect to FortiGuard servers, try restarting your FortiGate device, as this can often resolve connectivity issues.

Check your internet connection to ensure it's stable and working properly, as a weak or unstable connection can prevent you from connecting to FortiGuard servers.

Verify that your FortiGate device is configured to connect to the correct FortiGuard servers, as specified in the FortiGate device's configuration settings.

A fresh viewpoint: Cod Servers Back Online

Credit: youtube.com, How to Solve Fortiguard Filtering Services Unreachability in Fortigate Firewall

Ensure that your FortiGate device's DNS settings are correct, as incorrect DNS settings can prevent you from connecting to FortiGuard servers.

Check for any firewall rules that may be blocking access to FortiGuard servers, and adjust them as needed to allow connectivity.

Make sure your FortiGate device's time and date are set correctly, as an incorrect time and date can prevent you from connecting to FortiGuard servers.

Server Connection Issues

Some users have experienced issues connecting to FortiGuard servers, with one user, Jay, reporting the same problem in November 2023.

Multiple tickets with Fortinet support have been documented, but the root cause of the issue remains unexplained.

Several users have experienced the same issue, indicating a possible widespread problem.

If you're experiencing issues connecting to FortiGuard servers, it may be helpful to review your support tickets and see if others have reported similar problems.

Intriguing read: Dropbox Connecting

Fix Web Filter Service Error

The Web Filter Service Error can be frustrating, especially when you're trying to connect to FortiGuard servers.

Credit: youtube.com, How to Solve Fortiguard Filtering Services Unreachability in Fortigate Firewall

This error often occurs due to a misconfigured Web Filter Service.

Check the Web Filter Service status by going to the FortiGate's GUI and navigating to System > Feature Visibility > Web Filter.

If the status is set to "Disabled", enable it and apply the changes.

A common cause of this error is a DNS server issue, which can be resolved by configuring a DNS server on the FortiGate.

In the DNS settings, ensure that the "Use DNS Server" option is enabled and a valid DNS server IP address is specified.

Also, verify that the DNS server is accessible from the FortiGate by pinging it from the CLI.

A slow or unresponsive DNS server can cause the Web Filter Service to malfunction, so make sure it's functioning properly.

If you're still experiencing issues, try restarting the Web Filter Service or the FortiGate itself.

On a similar theme: Web Server Programming

Alternative Connection Methods

If you're still experiencing issues connecting to FortiGuard servers, there are alternative connection methods you can try.

Credit: youtube.com, Unable to load FortiGuard DDNS Servers List on FortiGate FireWalls

Changing the DNS server can help resolve the issue in some cases. To do this, open the dashboard, expand the Network tab, and select DNS. Then, head to the Specify tab and use another DNS server instead of the default FortiGuard server.

You can access FortiGuard via a proxy using a FortiWeb as a proxy or a web proxy server. To use a FortiWeb as a proxy, you must first configure a FortiWeb in the network to act as an FDS proxy. This involves enabling the FDS proxy in the CLI, configuring the proxy in the web UI, and optionally overriding the default FortiGuard IP address and scheduling poll updates.

To use a web proxy server, you can configure FortiWeb to connect through an explicit web proxy server in the CLI using the HTTP CONNECT method. This involves entering specific CLI commands to configure the autoupdate tunneling.

Change DNS

Changing the DNS server can be a lifesaver when you're experiencing issues with your network connection. This method can eliminate several network-related problems, including being unable to connect to FortiGuard servers.

Credit: youtube.com, How to fix dns server not responding on windows 11/10/7 | Wifi or Wired Connection | 2025

To change the DNS server, you'll need to open the dashboard and navigate to the Network tab. From there, you'll select DNS and head to the Specify tab to use a different DNS server.

Enter the following in the text field: provide a local domain name and click Apply to save the changes. This simple step can resolve the issue in many cases, as it worked in 4 out of 5 instances of the error we came across.

Access FortiGuard Through Proxy

Accessing FortiGuard through a proxy is a viable alternative connection method for FortiWeb. You can use a FortiWeb as a proxy or a web proxy server to access FortiGuard.

To use a FortiWeb as a proxy, you must first configure a FortiWeb in the network to act as an FDS proxy. This can be done in the CLI by entering the command `set fds-proxy enable`. You can then go to System > Config > FDS Proxy to configure the proxy settings.

Take a look at this: Next Js Use Server

Credit: youtube.com, How to configure the explicit web proxy on Fortigate Firewall

You can override the default FortiGuard IP address by enabling the Override Default FortiGuard IP Address option and entering the IP address or domain name of the particular FDS to which you want FortiWeb to connect. This option is also available in the web UI.

FortiWeb can also poll updates from FDS at scheduled intervals. You can enable Scheduled Poll Update and select one of the following options: Every, Daily, or Weekly. If enabled, select one of the following options: Every—FortiWeb will poll updates every x hour(s), where x is the integer that you select from the drop-down menu; Daily—FortiWeb will poll updates every day at the hour that you specify from the drop-down menu; or Weekly—FortiWeb will poll updates on the day and time that you specify.

To access FortiGuard via a web proxy server, you can configure FortiWeb to connect through an explicit (non-transparent) web proxy server. This can be done using the CLI by entering the command `config system autoupdate tunneling`.

Here are the steps to configure FortiWeb to access FDS for license validation via a FortiWeb proxy:

1. Configure a FortiWeb as a FDS proxy

2. Enable Override default FortiGuard Address

3. Enter the IP address or domain name of the FortiWeb proxy in the Override default FortiGuard Address field

Frequently Asked Questions

What are FortiGuard servers?

FortiGuard servers are part of the FortiGuard Distribution Network (FDN) that deliver content, web, and device security services. They provide FortiGuard services, including signature packages and querying services, to ensure comprehensive security protection.

How do I disable FortiGuard server?

To disable FortiGuard services globally, enter the command "set outbreak-prevention-force-off enable" and "set webfilter-force-off enable" in your FortiGate configuration. This will turn off Virus Outbreak Prevention and Web Filtering services.

Elaine Block

Junior Assigning Editor

Elaine Block is a seasoned Assigning Editor with a keen eye for detail and a passion for storytelling. With a background in technology and a knack for understanding complex topics, she has successfully guided numerous articles to publication across various categories. Elaine's expertise spans a wide range of subjects, from cutting-edge tech solutions like Nextcloud Configuration to in-depth explorations of emerging trends and innovative ideas.

Love What You Read? Stay Updated!

Join our community for insights, tips, and more.